Now, firstly we need fulfill our repository for software updates we interested in. Then we can use mass deployment for programs to be installed or updated according to repository. Mass deployment can be configured as by schedule on (server-)computer or done by "one click" selection of computers/programs.

This is a bit more than usual patch management: we don't need special appliance, we may fully customize our software deployment configurations and we are on top of all of it. Also, computers may or may not be joined into domain. And, for example TeamViewer VPN access can be applied.